Privacy Policy

This section contains information on the processing of personal data collected through the site www.olifa.com, made pursuant to and for the purposes of Article 13 of EU Regulation 2016/679.

Data controller and data processing managers

The data controller of users’ personal data is the agricultural concern OLIFA (hereinafter Olifa or Data Controller), with registered office in Viale del Lavoro n. 15/E, 37036 – San Martino Buon Albergo (VR), which can be contacted at the following address [email protected]

Users’ personal data are processed by individuals expressly designated by the Data Controller. The designated persons may conduct the operations of consultation, use, processing, and any other appropriate operation (including automated), only if authorized by the Data Controller and under his responsibility, for the purposes illustrated below.

By virtue of specific agreements/conventions, user data may also be processed by Data Managers external to the Data Controller’s organization, who supply services for which data processing is required on behalf of the Data Controller.

For the purpose of appointing external Data Managers, evaluation is conducted on their ability to ensure full compliance with provisions in force on the processing of personal data and, more precisely, the knowledge, reliability and resources to adopt technical and organizational measures that meet the requirements of the law.

Data processing methods

The processing of the user’s personal data is conducted through the use of computer, telematic and paper tools and support in compliance with the provisions of the law aimed at guaranteeing security and confidentiality, as well as the accuracy, updating and relevance of the data with respect to the declared purposes.

Specific security measures are observed to prevent the loss of data, illicit or incorrect use of the same and unauthorized access, in order to allow access only to persons in charge or managers appointed by the Data Controller.

Type of data processed and purpose of processing

By accessing the site and visiting the relevant pages, the user’s surfing data (e.g. IP; type of browser and details of the device used to connect to the site; date and time of connection) will be collected and processed automatically and without requiring registration or the filling in of online forms.

Olifa also uses cookies in some areas of the site in order, for example, to check if users have already visited the site and to understand which site pages are the most popular. To understand and gain further information on this particular type of processing of personal data, please read the on-site Cookie Policy.

It is also possible to come across plugins on our site, which allow the user to interact with social networks which, in turn, acquire data relating to the user’s surfing activities. In these cases, by clicking on the icon of the social network, it is the user who gives his express consent to share surfing data. The collection and use of information by such third parties is governed by their respective privacy policies, which you are invited to consult.

The Data Controller may then collect and process personal data, voluntarily provided by users who use the web services made available on the site, for the purposes illustrated below.

  • Processing of requests for information. When an email is spontaneously sent to one of Oliva’s e-mail addresses, the sender address, the connected surfing data and any other personal data contained in the communication and in any attachments are acquired in order to satisfy the request. In this case, the legal basis of the data processing, aimed at processing the user’s request, is the adoption of pre-contractual measures at the request of the interested party.
  • Newsletter and marketing activities. To access the services and content provided through the website (e.g., request the sending of newsletters, sending commercial communications on products, events and demonstrations or filling out of customer satisfaction questionnaire), the user will be asked to fill out a form in order to acquire and store the e-mail address, name, surname and address of the interested party, as well as having his surfing data processed. The legal basis of the processing is the user’s freely given informed consent.
  • Access to e-commerce features and purchase of products. To make a purchase on the site, the user will need to sign up by filling out a special registration form, which requires them to indicate their name and surname, telephone number, e-mail address and password. This operation is directed to the creation of an account with access to the reserved area where, in addition to the data provided during registration, those relating to orders placed are stored. To make a purchase, additional information may be requested, such as data relating to the means of payment used and for any invoicing. Once the purchase has been completed, the data provided may be used by the Data Controller to execute requests for assistance or return/refund procedures that may be provided in favour of the customer.

The legal basis of the processing is the execution of the purchase contract or pre-contractual measures adopted at the request of the user.

  • Shipments of products to third party recipients and after-sales assistance. During the purchase phase it is possible to request shipment or delivery of the products to a third party. In this case, the buyer is also required to provide the personal data of the third party (name, surname, residential address and telephone number), necessary to execute the service. The legal basis of the processing is the legitimate interest of the Data Controller to execute a contract.
  • The data provided by the user to make use of individual services are used for the activity of so-called profiling, or the analysis of the social composition of consumers based on age, sex, origin, etc., in order to enable Olifa to develop products and services with characteristics in line with consumer preferences and allow for the sending of advertising communications as closely as possible in line with the user’s tastes and interests.

The provision of data is always optional, but necessary in order to use the services requested and implement the contract of which the user is a party. Failure to provide such data will make it impossible to process requests and provide the service.

The user’s personal data are processed solely for the purposes strictly pertinent to the service requested and used. The use of data for further or different purposes may take place only with the consent of the interested party or, in some limited cases, in the presence of a legitimate interest on the part of Data Controller (e.g., accounting and tax obligations).

Communication of data to third parties

Olifa communicates the personal data of customers to third parties only when this is necessary and functional to achieve the purposes of processing in relation to the requested service and, in any case, proceeds with the communication only after informing the customer or upon prior consent of the same.

Personal data may be made accessible or communicated to employees and/or collaborators of the Data Controller or to public or private subjects, natural or legal, which the Data Controller uses for the performance of activities instrumental to the achievement of the purposes listed above or to those to whom he is required to communicate the data by virtue of legal or contractual obligations.

These subjects, depending on the case, will be appointed by the Data Controller, his charges or external Data Managers.

The data acquired during online surfing may be seen by third-party companies, appointed as external data processors, which provide IT assistance services and data processing.

Olifa protects and does not disclose the personal data of its users.

Transfer of data to non-EU countries

The Data Controller does not transfer personal data beyond the borders of the European Union.

Retention period

The user’s personal data will be kept for the period of time necessary to execute the purchase contract and the subsequent period required by law to activate the rights deriving from the same (limitation period or until the conclusion of any dispute), as well as for the time necessary to fulfill the obligations of conservation of tax and accounting documentation.

In the case of processing for other purposes (e.g., request for information by the interested party or marketing activities), the data will be kept until request for cancellation is made by the user, which can be sent at any time to the e-mail address [email protected]

Rights of the interested party

In accordance with the provisions of Articles. 15 – 21 EU Regulation 2016/679, the user has

  • right of access, that is, to know if personal data concerning him is being processed and have the opportunity to obtain a copy of such data and be informed about the origin of the same; the recipients of the data; the purposes of the processing; the existence of an automated decision-making process, including profiling; the data retention period; the rights provided for by the Regulation.
  • right to rectification, or to obtain the correction of data concerning him in the possession of the Data Controller or to integrate data that are incomplete.
  • right to cancellation, or to request the cancellation of your personal data if they are no longer necessary for the purpose for which they were collected or if we are no longer authorized to process them.
  • right to restriction of processing in case of (a) dispute regarding the accuracy of personal data and for the period necessary for the Data Controller to verify the accuracy of the data; (b) lack of permission to process the data, rather than deletion, may be required to restrict its use; (c) data necessary for the establishment, exercise or defence of a right in a court of law; (d) opposition to processing based on a legitimate interest on the part of the Data Controller.
  • right to withdraw consent in relation to all processing based on it.
  • right to data portability. In the event that the processing of data takes place on the basis of consent or in execution of a contract, or is conducted by automated means, the right to data portability can be exercised. The user can request to receive the personal data he has communicated in a structured format, commonly used and readable by an automatic device or, alternatively, to transmit his data directly to another company, provided that this is technically possible.
  • right to object to the processing of personal data based on a legitimate interest on the part of the Data Controller, including profiling.

To exercise the rights listed above you can write to the e-mail address [email protected]. The request will be answered as soon as possible and, in any case, no later than 30 days from receipt of the same.

Finally, if the user believes the processing of personal data concerning him is carried out in contrast with the provisions of EU Regulation 2016/679, finally, he has the right to lodge a complaint with the competent supervisory authority on data protection, in the manner indicated on the website www.garanteprivacy.it.

This section contains information on the processing of personal data collected through the site www.olifa.com, made pursuant to and for the purposes of Article 13 of EU Regulation 2016/679.

Data controller and data processing managers

The data controller of users’ personal data is the agricultural concern OLIFA (hereinafter Olifa or Data Controller), with registered office in Viale del Lavoro n. 15/E, 37036 – San Martino Buon Albergo (VR), which can be contacted at the following address [email protected]

Users’ personal data are processed by individuals expressly designated by the Data Controller. The designated persons may conduct the operations of consultation, use, processing, and any other appropriate operation (including automated), only if authorized by the Data Controller and under his responsibility, for the purposes illustrated below.

By virtue of specific agreements/conventions, user data may also be processed by Data Managers external to the Data Controller’s organization, who supply services for which data processing is required on behalf of the Data Controller.

For the purpose of appointing external Data Managers, evaluation is conducted on their ability to ensure full compliance with provisions in force on the processing of personal data and, more precisely, the knowledge, reliability and resources to adopt technical and organizational measures that meet the requirements of the law.

Data processing methods

The processing of the user’s personal data is conducted through the use of computer, telematic and paper tools and support in compliance with the provisions of the law aimed at guaranteeing security and confidentiality, as well as the accuracy, updating and relevance of the data with respect to the declared purposes.

Specific security measures are observed to prevent the loss of data, illicit or incorrect use of the same and unauthorized access, in order to allow access only to persons in charge or managers appointed by the Data Controller.

Type of data processed and purpose of processing

By accessing the site and visiting the relevant pages, the user’s surfing data (e.g. IP; type of browser and details of the device used to connect to the site; date and time of connection) will be collected and processed automatically and without requiring registration or the filling in of online forms.

Olifa also uses cookies in some areas of the site in order, for example, to check if users have already visited the site and to understand which site pages are the most popular. To understand and gain further information on this particular type of processing of personal data, please read the on-site Cookie Policy.

It is also possible to come across plugins on our site, which allow the user to interact with social networks which, in turn, acquire data relating to the user’s surfing activities. In these cases, by clicking on the icon of the social network, it is the user who gives his express consent to share surfing data. The collection and use of information by such third parties is governed by their respective privacy policies, which you are invited to consult.

The Data Controller may then collect and process personal data, voluntarily provided by users who use the web services made available on the site, for the purposes illustrated below.

  • Processing of requests for information. When an email is spontaneously sent to one of Oliva’s e-mail addresses, the sender address, the connected surfing data and any other personal data contained in the communication and in any attachments are acquired in order to satisfy the request. In this case, the legal basis of the data processing, aimed at processing the user’s request, is the adoption of pre-contractual measures at the request of the interested party.
  • Newsletter and marketing activities. To access the services and content provided through the website (e.g., request the sending of newsletters, sending commercial communications on products, events and demonstrations or filling out of customer satisfaction questionnaire), the user will be asked to fill out a form in order to acquire and store the e-mail address, name, surname and address of the interested party, as well as having his surfing data processed. The legal basis of the processing is the user’s freely given informed consent.
  • Access to e-commerce features and purchase of products. To make a purchase on the site, the user will need to sign up by filling out a special registration form, which requires them to indicate their name and surname, telephone number, e-mail address and password. This operation is directed to the creation of an account with access to the reserved area where, in addition to the data provided during registration, those relating to orders placed are stored. To make a purchase, additional information may be requested, such as data relating to the means of payment used and for any invoicing. Once the purchase has been completed, the data provided may be used by the Data Controller to execute requests for assistance or return/refund procedures that may be provided in favour of the customer.

The legal basis of the processing is the execution of the purchase contract or pre-contractual measures adopted at the request of the user.

  • Shipments of products to third party recipients and after-sales assistance. During the purchase phase it is possible to request shipment or delivery of the products to a third party. In this case, the buyer is also required to provide the personal data of the third party (name, surname, residential address and telephone number), necessary to execute the service. The legal basis of the processing is the legitimate interest of the Data Controller to execute a contract.
  • The data provided by the user to make use of individual services are used for the activity of so-called profiling, or the analysis of the social composition of consumers based on age, sex, origin, etc., in order to enable Olifa to develop products and services with characteristics in line with consumer preferences and allow for the sending of advertising communications as closely as possible in line with the user’s tastes and interests.

The provision of data is always optional, but necessary in order to use the services requested and implement the contract of which the user is a party. Failure to provide such data will make it impossible to process requests and provide the service.

The user’s personal data are processed solely for the purposes strictly pertinent to the service requested and used. The use of data for further or different purposes may take place only with the consent of the interested party or, in some limited cases, in the presence of a legitimate interest on the part of Data Controller (e.g., accounting and tax obligations).

Communication of data to third parties

Olifa communicates the personal data of customers to third parties only when this is necessary and functional to achieve the purposes of processing in relation to the requested service and, in any case, proceeds with the communication only after informing the customer or upon prior consent of the same.

Personal data may be made accessible or communicated to employees and/or collaborators of the Data Controller or to public or private subjects, natural or legal, which the Data Controller uses for the performance of activities instrumental to the achievement of the purposes listed above or to those to whom he is required to communicate the data by virtue of legal or contractual obligations.

These subjects, depending on the case, will be appointed by the Data Controller, his charges or external Data Managers.

The data acquired during online surfing may be seen by third-party companies, appointed as external data processors, which provide IT assistance services and data processing.

Olifa protects and does not disclose the personal data of its users.

Transfer of data to non-EU countries

The Data Controller does not transfer personal data beyond the borders of the European Union.

Retention period

The user’s personal data will be kept for the period of time necessary to execute the purchase contract and the subsequent period required by law to activate the rights deriving from the same (limitation period or until the conclusion of any dispute), as well as for the time necessary to fulfill the obligations of conservation of tax and accounting documentation.

In the case of processing for other purposes (e.g., request for information by the interested party or marketing activities), the data will be kept until request for cancellation is made by the user, which can be sent at any time to the e-mail address [email protected]

Rights of the interested party

In accordance with the provisions of Articles. 15 – 21 EU Regulation 2016/679, the user has

  • right of access, that is, to know if personal data concerning him is being processed and have the opportunity to obtain a copy of such data and be informed about the origin of the same; the recipients of the data; the purposes of the processing; the existence of an automated decision-making process, including profiling; the data retention period; the rights provided for by the Regulation.
  • right to rectification, or to obtain the correction of data concerning him in the possession of the Data Controller or to integrate data that are incomplete.
  • right to cancellation, or to request the cancellation of your personal data if they are no longer necessary for the purpose for which they were collected or if we are no longer authorized to process them.
  • right to restriction of processing in case of (a) dispute regarding the accuracy of personal data and for the period necessary for the Data Controller to verify the accuracy of the data; (b) lack of permission to process the data, rather than deletion, may be required to restrict its use; (c) data necessary for the establishment, exercise or defence of a right in a court of law; (d) opposition to processing based on a legitimate interest on the part of the Data Controller.
  • right to withdraw consent in relation to all processing based on it.
  • right to data portability. In the event that the processing of data takes place on the basis of consent or in execution of a contract, or is conducted by automated means, the right to data portability can be exercised. The user can request to receive the personal data he has communicated in a structured format, commonly used and readable by an automatic device or, alternatively, to transmit his data directly to another company, provided that this is technically possible.
  • right to object to the processing of personal data based on a legitimate interest on the part of the Data Controller, including profiling.

To exercise the rights listed above you can write to the e-mail address [email protected]. The request will be answered as soon as possible and, in any case, no later than 30 days from receipt of the same.

Finally, if the user believes the processing of personal data concerning him is carried out in contrast with the provisions of EU Regulation 2016/679, finally, he has the right to lodge a complaint with the competent supervisory authority on data protection, in the manner indicated on the website www.garanteprivacy.it.